diff --git a/Dockerfile b/Dockerfile
index 6e9e4bc..a1d4fad 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi8/openjdk-17:1.13 AS builder
+FROM registry.access.redhat.com/ubi8/openjdk-17:1.14-10.1675788279 AS builder
 LABEL maintainer="IBM Java Engineering at IBM Cloud"
 
 USER root
@@ -23,7 +23,7 @@ USER 1001
 # Docker at the moment.
 # (https://github.com/ibmruntimes/ci.docker/tree/master/ibmjava/8/sfj/ubi-min)
 
-FROM registry.access.redhat.com/ubi8/openjdk-17:1.13
+FROM registry.access.redhat.com/ubi8/openjdk-17:1.14-10.1675788279
 
 # disable vulnerable TLS algorithms
 USER root
diff --git a/Dockerfile-tools b/Dockerfile-tools
index 35c0eae..2224ba7 100644
--- a/Dockerfile-tools
+++ b/Dockerfile-tools
@@ -1,7 +1,7 @@
 # In the short term, we are using the OpenJDK for UBI. Long term, we will use
 # the IBM Java Small Footprint JVM (SFJ) for UBI, but that is not in public
 # Docker at the moment.
-FROM registry.access.redhat.com/ubi8/openjdk-17:1.13
+FROM registry.access.redhat.com/ubi8/openjdk-17:1.14-10.1675788279
 
 LABEL maintainer="IBM Java Engineering at IBM Cloud"